Your company has multiple accounts in various regions that contain resources such as EC2, CloudWatch, DynamoDB, EBS, Redshift, RDS, S3, ElasticbeanStalk, IAM, Autoscaling, and Elastic Load Balancer. The IT Audit department requires a report of all the resources that are used by your company. Which of the following will help you to provide a report in the easiest way?

Answer options:

A.Create a PowerShell script using the AWS CLI. Query all resources with the tag of production.
B.Create a bash shell script with the AWS CLI. Query all resources in all regions. Store the results in an S3 bucket.
C.Use CloudTrail to get the list of all resources.
D.Use AWS Config to get the list of all resources.

Answer is D
Option A is incorrect because the solution would only present resources with a production tag and exclude the rest of the resources required as per the asks.
Option B is incorrect because the question requires us to obtain the report most easily and this option complicates the solution.
Option C is incorrect because AWS CloudTrail is used to log all the API activity but does not provide a report on the services used. This provides no information on services used.
Option D is CORRECT because AWS Config makes it easy to monitor the AWS resources across multiple accounts and regions using the multi-account, multi-region data aggregation capability. You can create a configuration aggregator in any account and aggregate the details from other accounts.
A sample snapshot of the resource`s dashboard in AWS Config is shown below
For more information on AWS Config, please visit the below URL
https://docs.aws.amazon.com/config/latest/developerguide/how-does-config-work.html